Gartner defines network security microsegmentation — also referred to as zero-trust network segmentation — as an effort that can create more granular and dynamic access policies than traditional network segmentation (often north-south traffic segmentation). It allows the insertion of a security policy between any two workloads in the same broadcast domain — with microsegmentation technologies narrowing fine-grained network zones down to individual assets and applications. Microsegmentation tools support the implementation of finer-grained zoning across public, private and hybrid cloud infrastructures. Security and risk management (SRM) leaders must understand the key features, use cases, and role of microsegmentation in their environment, as well as determine which model is the best fit for their needs.
Gartner defines zero trust network access (ZTNA) as products and services that create an identity and context-based, logical-access boundary that encompasses an enterprise user and an internally hosted application or set of applications. The applications are hidden from discovery, and access is restricted via a trust broker to a collection of named entities, which limits lateral movement within a network.